Abstract: Segmented media content rights management is described. A media device can receive segments of protected media content from media content streams that each include a different version of the protected media content. A media content file can be generated to include the segments of the protected media content that are sequenced to render the protected media content for viewing. A file header object can be instantiated in a file header of the media content file, where the file header object includes DRM-associated features, such as one or more DRM licenses, properties, and/or attributes that correspond to the media content file to provision all of the segments of the protected media content together.

Abstract: An equipment managing system includes an intermediating apparatus and an equipment managing apparatus. The intermediating apparatus is connected to a license management apparatus and a program management apparatus via a network. The equipment managing apparatus is connected to an electronic equipment via a network. The intermediating apparatus stores a program acquired from the program management apparatus and a license file acquired from the license management apparatus to an external storage medium. The equipment managing apparatus sends the program and the license file recorded in the external storage medium to the electronic equipment.

Abstract: Service delivery systems and methods are described. In one aspect, a service delivery system includes a set of tokens, a database, multiple terminals, and a service manager. Each of the tokens includes a respective token identifier. The database stores personal user profiles each of which is associated with a respective token identifier. The terminals are distributed about a selected locale. Each terminal has a reader that is operable to read token identifiers from tokens and a controller that is operable to transmit read token identifiers and context data identifying one or more conditions under which a token identifier is read through a network connection each time a token identifier is read. The service manager is connected to each of the terminals through a respective network connection and to the database.

Abstract: Techniques are disclosed for sharing information in a wide variety of contexts. An information sharing system is described that allows both an explicit capture process and an implicit capture process to add information items to a staging area. Further, the information sharing system supports both implicit and explicit consumption of information items that are stored in said staging area. A rules engine is provided to allow users to create and register rules that customize the behavior of the capture processes, the consuming processes, and propagation processes that propagate information from the staging areas to designated destinations. Techniques are also described for achieving exactly-once handling of sequence of items, where the items are maintained in volatile memory. Techniques are also provided for recording DDL operations, and for asynchronously performing operations based on the previously-performed DDL operations.

Abstract: A recording device records one or more subcontents constituting one content recorded on a first recording medium, onto a second recording medium, wherein the first recording medium has further recorded thereon digest values of the subcontents, and a medium signature generated based on the digest values of the subcontents. The recording device includes a subcontent acquisition unit that selects and acquires one or more subcontents permitted to be copied; an excluded digest value acquisition unit that acquires excluded digest values from the first recording medium, wherein the excluded digest values are digest values of nonselected subcontents; a signature acquisition unit that acquires the medium signature from the first recording medium; and a write unit that writes, onto the second recording medium, (i) the one or more selected subcontents, (ii) the excluded digest values and (iii) the medium signature.

Abstract: A method and system for identifying a work in a data transfer. In accordance with this invention, a data transfer is received. The media content of a work is then read from the data transfer. The media content is then used to generate a fingerprint of the work. The fingerprint is then used to identify the work. A report including the identity of the work is then generated.

Abstract: A process model lean notation provides an easy to understand way to categorize the process elements of a process using a process definition grammar. Process model lean notation allows an organization to rapidly identify the process elements of a process and the interactions between the process elements, and produces a process categorization that includes an ordered sequence of the process elements. A process categorization provides a structured presentation of the process elements and clearly indicates for each process element the task accomplished, the actor responsible for and/or performing the task, the tool that may be used to perform the task, and the work product that may result by performing the task.

Abstract: A system is provided for managing asset access. The system includes a processor, a user manager interface, an asset manager interface, and an access tool. The access tool, when executed by the processor, compiles a user list of user access to restricted assets, provides the user list to the user manager interface, and receives a modified user list of user access to the restricted assets from the user manager interface. The access tool also compiles an asset list of user access to the restricted assets, provides the asset list to the asset manager interface, and receives a modified asset list of user access to the restricted assets from the asset manager interface. Additionally, the access tool modifies the user access to at least one of the restricted assets based on at least one of the modified user list and the modified asset list.

Abstract: A data generating device is capable of preventing unauthorized extraction of plaintext content between decryption processing and digital watermark embedment processing. A content reproducing device obtains restoration information and, in accordance with the restoration information, selectively performs predetermined restoration processing and processing of embedding device unique information, on content data at a position shown by the restoration information.

Abstract: A method of embedding information in a computer program code, including a plurality of program statements. The method comprises: parsing the computer program code to identify at least one program statement that includes a first mathematical expression, wherein said first mathematical expression includes at least a first algebraic expression adapted to produce at least one numeric result; generating a modified mathematical expression by performing a predetermined transformation of the first mathematical expression, wherein the modified mathematical expression includes a transformed algebraic expression instead of the first algebraic expression, such that the modified mathematical expression is adapted to produce the same result as the first mathematical expression, and wherein the modified mathematical expression is indicative of at least a part of said information; replacing said first mathematical expression in the identified program statement by the modified mathematical expression.

Abstract: Some embodiments of the invention provide a method for distributing content over a network. The method distributes a single media storage structure to a device (e.g., a computer, portable player, etc.) that connects to the network. The media storage structure includes first and second pieces of encrypted content. Based on whether the device is allowed to access the first piece of content, the second piece of content, or both, the method provides the device with a set of keys for decrypting the pieces of the content that the device is able to access. The provided set of keys might include one or more keys for decrypting only one of the two encrypted pieces of content. Alternatively, it might include one or more keys for decrypting both encrypted pieces of content. For instance, the selected set of keys might include a first key for decrypting the first encrypted piece and a second key for decrypting the second encrypted piece.

Abstract: A system and method facilitates purchase transactions over a computer network, including the purchase of electronically storable items. The embodiments herein encrypt “customer information” in an encryption stream and cause the encryption stream to be transferred from the customer to a merchant in the purchase transaction. A verification entity receives the encryption stream which is sent by the merchant for identity verification and payment authorization. Then, the verification entity verifies the identifiers contained in the encryption stream and transfers an identity verification and payment authorization from the verification entity to the merchant. The encryption stream or unique transaction identifier can be added, by the merchant, to a purchased electronic item to create a personalized electronic item.

Abstract: A method for managing rights associated with data is described. A request to access encrypted data is intercepted. Credentials associated with the request are verified. The data is decrypted if the credentials are verified. The decrypted data is marked with an identifier. Predetermined operations directed to the decrypted data are monitored.

Abstract: A reputation server is coupled to multiple clients via a network. Each client has a security module that detects malware at the client. The security module computes a hygiene score based on detected malware. The security module provides the hygiene score and an identifier of a visited web site to a reputation server. The security module also provides identifiers of files encountered at specified web sites to the reputation server. The reputation server computes secondary hygiene scores for web sites based on the hygiene scores of the clients that visit the web sites. The reputation server further computes reputation scores for files based on the secondary hygiene scores of sites that host the files. The reputation server provides the reputation scores to the clients. A reputation score represents an assessment of whether the associated file is malicious.

Abstract: A method by which a User can associate selectable Markers, Data Packets and/or Objects with Content. The Content may generally be distributed electronically, and the Markers allow for insertion and/or overlay of Objects when the Content is selected for viewing by a Viewer. Objects and Data Packets are generally provided by a User, Promoter, Host, Service, or other entity to convey information to a Viewer. A Service provides tools and capabilities to both the User and the Promoter to facilitate their respective actions according to embodiments of the invention, including enabling the creation of live social networks (such as those linked to a specific Service provider, a specific User group, activities by a specific Promoter, and/or to specific Data Packets) and the creation of n-dimensional Virtual Environments.

Abstract: A system and method for coordinating identification of an object transported between a sender and a receiver includes the object. The object is one of a plurality of similar objects. An object identifier is associated with the object. The object identifier is an element in a non-repeating, non-linear series of object identifiers for the similar objects. A communication system is between the sender and the receiver for communicating at least a characteristic of the object identifier.

Abstract: An apparatus and method capable of purchasing external charged content in a UPnP network are provided. A media server (MS) provides a media renderer (MR) with a URL that executes a CGI that that performs purchasing of a charged content included in an external server, and, if the MR requests the reproduction of content corresponding to the URL, the MS executes a CGI of the URL, purchases charged content corresponding to the URL, and downloads the charged content, thereby browsing a list of contents provided by an external contents purchase site through a consumer electronic device such as a digital television, in which a UPnP audio/visual control point is mounted without a separate interface, purchasing desired content, and reproducing the purchased content.

Abstract: A system and method for the secure storage of data in a network. Data stored on a primary server connected to the network is initially encrypted. The IP address of the primary server is sent to a second server, via the network, and a communication is received from the second server indicating pending instructions. If the instructions indicate that theft of the primary server has occurred, then the data stored on the primary server is re-encrypted and the IP address of the primary server is sent to the second server. If attempted unauthorized access of the primary server is determined, and a predetermined number of consecutive unauthorized attempts to access the primary server are made, then the data stored on the primary server is erased.

Abstract: Federated systems for issuing playback certifications granting access to technically protected content are described. One embodiment of the system includes a registration server connected to a network, a content server connected to the network and to a trusted system, a first device including a non-volatile memory that is connected to the network and a second device including a non-volatile memory that is connected to the network. In addition, the registration server is configured to provide the first device with a first set of activation information in a first format, the first device is configured to store the first set of activation information in non-volatile memory, the registration server is configured to provide the second device with a second set of activation information in a second format, and the second device is configured to store the second set of activation information in non-volatile memory.

Abstract: A method (300), system (100) and apparatus (200) are provided that enable selected features in a group of two or more devices. A first of the devices (102A) receives a license (306) identifying features to be enabled. The first device (102A) transmits the license (308) to other devices in the group (102B, 102C). The devices in the group (102A-102C) enable selected features (312), according to the license, from features that are available in all the devices in the group. The license may be encrypted (302) and the devices decrypt the license (310) before enabling the selected features (312). The license may be modified (302) using an identifier associated with the first device (102A) of the group and the first device transmits the identifier (308) to the other devices in the group, along with the encrypted license. The devices authorize the license (310) using the transmitted identifier.

Abstract: A method and system for making a donation to a third party, wherein a user executes a purchase transaction using a card linked to a reward point account If a user donation is desired, then the user's reward point account is decreased and corresponding value is transferred to a designated third party as a donation. In another aspect referred to as “topping off”, the donation amount is the difference between the tender amount and the purchase amount, and is transferred to a designated third party as a donation to the third party in lieu of providing change for the transaction back to the user.

Abstract: A content transfer control system for a wireless device and a method of controlling content transfer from a wireless device are described. The system includes a content transfer control component arranged to (a) detect licensed content and (b) transfer a content source indicating a source of the licensed content responsive to detection of licensed content. The method includes transmitting content from the wireless device if the content is not determined to be licensed content and transmitting a content source from the wireless device if the content is determined to be licensed content.

Abstract: A reproduction apparatus has a player section, a content reproduction section, an interface section. The player section has a read section reading data from the record medium on which the content data containing at least one of a video data stream and an audio data stream and a reproduction control program controlling the reproduction of the content data are recorded, an input section accepting an input from a user, and an output section outputting the reproduced content data. The content reproduction section reproduces the content data according to the reproduction control program. The interface section interfaces among the content reproduction section, the reproduction control program, and the player section. When a command representing an end of the reproduced content data is described in the reproduction control program, the reproduction control program supplies the command to the interface section and the interface section executes a process corresponding to the command.

Abstract: A novel method and apparatus for protection of streamed media content is disclosed. In one aspect, the apparatus includes control means for governance of content streams or content objects, decryption means for decrypting content streams or content objects under control of the control means, and feedback means for tracking actual use of content streams or content objects. The control means may operate in accordance with rules received as part of the streamed content, or through a side-band channel. The rules may specify allowed uses of the content, including whether or not the content can be copied or transferred, and whether and under what circumstances received content may be “checked-out” of one device and used in a second device. The rules may also include or specify budgets, and a requirement that audit information be collected and/or transmitted to an external server. In a different aspect, the apparatus may include a media player designed to call plugins to assist in rendering content.

Abstract: An image processing apparatus acquires restricted function data indicating functions whose execution is restricted, and acquires function data indicating a plurality of functions to be called by script data. The apparatus determines, based on the acquired function data, a realizable function by combining the functions indicated by the function data, and determines, based on the restricted function data and the realizable function, whether to permit execution of the script data corresponding to the function data.

Abstract: A method and system for installing software and hardware licenses on electronic devices supporting licensable features. Specifically, a method is disclosed for installing licenses in a node based licensing scheme. The electronic device defining the node receives an input containing an authorization key. The authorization comprises a license for a service feature, a node identifier, a software version, and a sequence number. Information in the authorization key is used to install the license on the electronic device. The node identifier is compared to an official node identifier stored at the electronic device. The sequence number is compared to an official sequence number stored at the electronic device. The license is installed into a pool of licenses available to the electronic device when the node identifier matches the official node identifier and the sequence number matches the official sequence number. The sequence number ensures that the authorization key at most can only be used once.

Abstract: An apparatus for a flexible and common IPMP System (Intellectual Property Management and Protection) offers flexibility and interoperability by incorporating a complete IPMP Tool List stored in the content stream or downloaded from a URL location. The IPMP Tool Manager of a compliant IPMP terminal functioning as a preprocessor module is provided, the IPMP Tool List is parsed, and an IPMP Tool is acquired based on the IPMP Tool ID, related location identifier, and IPMP Tool Format ID. The IPMP Tool can be precompiled to a binary format and sent or downloaded to the IPMP terminal, and different binary formats are prepared by the content provider for use on different IPMP terminal platforms.

Abstract: There is provided a method for operating a basic input/output system (BIOS) of a pay-as-you go computer system. In one example embodiment, the method includes periodically resetting a watchdog timer, wherein failure to reset the watchdog timer indicates a security violation. In another example embodiment, the method also includes comparing a first time count representing motherboard use time with a second time count representing hard drive use time to determine if a security violation has occurred. There is also provided a pay-as-you-go computer system having a BIOS configured to determine if a hard drive is password protected. In an example embodiment, the BIOS is configured to calculate a password to unlock the hard drive if the hard drive is password protected.

Abstract: An information processor is capable of restricting the available application program interface for each application program. The information processor capable of executing a predetermined application program includes at least one application program interface for providing predetermined control function for the application program, a determining unit for determining an available application program interface for the application program based on license information of the application program, and an operation controlling means for controlling the operation of the application program interfaces in accordance with the results determined by the determining unit.

Abstract: The present invention relates to a recording apparatus and method and communication apparatus and method suitably for use in supplying the encoded data of accumulated music for example to a semiconductor memory or a portable device. In step S461, the content data enabled for check-in into an MS are identified. In step S462, a check-in process is executed. In step S463, it is determined whether or not the content data enabled for check-in have all been checked in. In step S464, an album to be checked out is determined. In step S465, one track is selected. In step S466, the selected track is determined whether or not it is enabled for check-out. In step S467, the capacity of the MS is confirmed. In step S468, a check-out operation is performed. In step S469, it is determined whether or not all tracks in the album to be checked out have been selected. The present invention is applicable to audio servers for example.

Abstract: A duplication/delivery center DDS records contents C11 and C12 on a recording medium M in accordance with requests from content providing apparatuses CP11 and CP12, duplicates the recording medium M, and delivers the recording medium M to users. When doing so, parts of the contents are encrypted. The content providing apparatuses CP11 and CP12 request a content control apparatus CC1 to control the contents on the recording media M. At the side of contents users, when a user sets a recording medium M in a video game console GM and tries to use a content that has been encrypted, the video game console GM requests, via a mobile packet communication network MPN, the content control apparatus CC1 to transmit a decryption key. The content control apparatus CC1 decides whether or not to transmit the decryption key based on the content of the request received from the content providing apparatus.

Abstract: A selective encryption encoder consistent with certain embodiments of the invention has vertical and/or horizontal stripes encrypted. In one embodiment, packets are examined in the digital video signal to identify a specified packet type, the specified packet type being both packets carrying intra-coded data representing a pattern of horizontal stripes across an image and packets carrying intra-coded data representing a pattern of vertical stripes across an image. The packets identified as being of the specified packet type are encrypted using a first encryption method to produce first encrypted packets. These first encrypted packets are then used to replace the unencrypted packets in the digital video signal to produce a partially encrypted video signal. The packets of the specified type can also be multiple encrypted and replaced in the data stream to produce a multiple encrypted video data stream.

Abstract: A network adapted to target an individual operating a microcomputer that is linked to an Internet to offer this individual goods or services appropriate to his needs that are available at a place within reach of the individual's present location. The microcomputer is provided with a GPS receiver that indicates the present location of the individual, this location and the identity of the individual being transmitted from the microcomputer to a web site on the highway. At the web site, a computer associated with a data bank storing the profiles of a multitude of consumers is programmed to find out whether the identified individual is included in the data bank, and to determine from his profile whether there are available at a place reachable from his present location appropriate goods or services. If a match is found, an offer to supply such goods or services is conveyed from the web site to the microcomputer.

Abstract: A viewer for displaying electronic books and having various features for restricting access to their content. A user may assign ratings to stored electronic books, or use standard ratings, and assign access levels to potential users. The ratings and access levels determine which electronic books, or portions of the electronic books, a particular user may access on the viewer.

Abstract: An identifier routine is described which, when executed by a host device, retrieves an identifier stored in a memory card and obtains an image using the identifier. The memory card is physically coupled to the host device. The image identifies a content provider from which the host device receives broadcast content. The identifier routine is then executed by the host device to output the image.

Abstract: A protection method for preventing a hard copy of a document from being released or reproduced is provided. The protection method comprises: selecting a pattern with a closed contour line and utilizing a level set method to process the pattern to generate at least a watermark; and embedding the watermark into the document. In addition, the protection method can further comprise: detecting the hard copy of the document to determine whether at least a watermark exists in the hard copy of the document; and forbidding releasing or reproducing the document when the watermark is detected in the hard copy of the document.

Abstract: In an electronic musical apparatus, a media ID (MD1, MD2, MD3, MD4, MD5) is associated with each recording media of a memory card 8, hard disk device 10, flash memory ROM 11, CD-ROM 12 and internet 15. Each media ID is encrypted to be recorded on a different position in a ROM 2. Upon reading a music content, the media ID of the corresponding recording media is decoded to decode the music content based upon the media ID and the secret key, and then, the resultant is temporarily stored in a RAM 3. Upon writing a music content, it is encrypted based upon the media ID corresponding to a recording media and the secret key, and the content in the RAM 3 is deleted. This makes cryptanalysis hard to thereby enhance a protection level of a music content in an electronic musical apparatus.

Abstract: Disclosed herein is an information processing apparatus including: a unit information acquisition section; an identification information acquisition section; a secondary version information acquisition section; a comparison section; and an operation control section.

Abstract: In an electronic musical apparatus, a media ID (MD1, MD2, MD3, MD4, MD5) is associated with each recording media of a memory card 8, hard disk device 10, flash memory ROM 11, CD-ROM 12 and internet 15. Each media ID is encrypted to be recorded on a different position in a ROM 2. Upon reading a music content, the media ID of the corresponding recording media is decoded to decode the music content based upon the media ID and the secret key, and then, the resultant is temporarily stored in a RAM 3. Upon writing a music content, it is encrypted based upon the media ID corresponding to a recording media and the secret key, and the content in the RAM 3 is deleted. This makes cryptanalysis hard to thereby enhance a protection level of a music content in an electronic musical apparatus.

Abstract: Architecture that facilitates validation of a data mapping of data from a data source to a data target. There is included a signature generation component that generates a source signature of all or a portion of the data source and a target signature of all or a corresponding portion of the data target, and a sampling component that obtains a sample of the source data a corresponding sample of the target data. The data signatures and data samples are compared respectively and processed with a processing component to determine the status of the validation process.

Abstract: Methods, systems, and products are disclosed for providing electronic media to a customer. One method prompts a customer to license a right to electronic media. If the customer agrees to license the right, then the license is electronically stored on behalf of the customer. The licensed electronic media is communicated to the customer via a communications network.

Abstract: An apparatus for generating copyright information for a secondarily processed content obtained by performing secondary processing on an original content, includes a secondary processed substance acquiring unit, a default license information generating unit, and a license information editing unit. The secondary processed substance acquiring unit acquires operation substances of the secondary processing performed on the original content. The default license information generating unit obtains rights expressions for the operation substances acquired by the secondary processed substance acquiring unit to generate default license information including the rights expressions as an initial value. The license information editing unit accepts selection of a desired rights expression by a user from the rights expressions of the default license information generated by the default license information generating unit to generate license information of the secondary processed content from the selected rights expression.

Abstract: The present disclosure attempts to migrate from a first authenticator to a second authenticator. In the most preferred embodiment, the first step is to migrate the data that is not stored encrypted by a traditional replication or transformation between the datastores of the authenticators. The new authenticator is placed in position, while the old authenticator is maintained. When a user attempts to login, servlets check to see if the user's password exists within the datastore for the new authenticator. If not, then the user is sent to the old authenticator's sign-on page. When the user enters their authentication credentials into the old authenticator, a code snippet or second servlet will capture this information and, on confirmation from the old authenticator that the user is properly authenticated, use the captured information to populate the new datastore.

Abstract: Music is blanket transmitted (for example, via satellite downlink transmission) to each customer's computer-based user station. Customers preselect from a list of available music in advance using an interactive screen selector, and pay only for music that they choose to have recorded for unlimited playback, for example, by a “CD burner”. An “ID tag” is woven into the recorded music so that any illegal copies therefrom may be traced to the purchase transaction.

Abstract: Disclosed is an optical disk barcode forming method wherein, as information to be barcoded, position information for piracy prevention, which is a form of ID, is coded as a barcode and is recorded by laser trimming on a reflective film in a PCA area of an optical disk. When playing back the thus manufactured optical disk on a reproduction apparatus, the barcode data can be played back using the same optical pickup.

Abstract: A document distribution system transfers a document from a source computer to a destination computer in the form of a print file. The print file defines the appearance of the document in a code suitable for telling a printer how to print the document. The source computer executes “license stamper” software for embedding an encoded license stamp into the print file before it is sent to the destination computer. Viewer software executed by the source computer receives and parses the print file to determine whether it contains the license stamp. If so, the viewer may generate a video display of the document defined by the print file or may print the document by sending the print file to a printer. However if the viewer receives a print file not containing the embedded license stamp, the viewer refrains from displaying or printing the document.

Abstract: A copy prevention method and apparatus for a digital video system is disclosed including the steps of: (a) adding a header area of a header start code and key field to a reproduced bit stream; (b) decrypting and transmitting the bit stream to which the header area is added; (c) detecting a key held of the decrypted and transmitted bit stream and detecting copy prevention information; and (d) encrypting the bit stream according to information detected from stop (c) and recording it an tape.

Abstract: A copy prevention method and apparatus for a digital video system is disclosed including the steps of: (a) adding a header area of a header start code and key field to a reproduced bit stream: (b) decrypting and transmitting the bit stream to which the header area is added: (c) detecting a key field of the decrypted and transmitted bit stream and detecting copy prevention information; and (d) encrypting the bit stream according to information detected from stop (c) and recording it an tape.

Abstract: A copy prevention method and apparatus for a digital video system is disclosed including the steps of: (a) adding a header area of a header start code and key field to a reproduced bit stream: (b) decrypting and transmitting the bit stream to which the header area is added: (c) detecting a key field of the decrypted and transmitted bit stream and detecting copy prevention information; and (d) encrypting the bit stream according to information detected from stop (c) and recording it an tape.

Abstract: A copy prevention method and apparatus for a digital video system is disclosed including the steps of: (a) adding a header area of a header start code and key field to a reproduced bit stream: (b) decrypting and transmitting the bit stream to which the header area is added: (c) detecting a key field of the decrypted and transmitted bit stream and detecting copy prevention information; and (d) encrypting the bit stream according to information detected from stop (c) and recording it an tape.